Tidal Cyber

Tidal Cyber maps a client’s defensive tools — EDR, SIEM, XDR — against MITRE ATT&CK techniques, then overlays specific adversary procedures to identify coverage gaps and residual risk. Its coverage maps calculate risk reduction on a technique-by-technique basis, and the platform updates recommendations whenever a threat profile changes. This shifts analysis from generic CVE scoring to attacker-behavior-based defense.

NARC is an AI engine designed to extract structured adversary procedures from unstructured intelligence — such as CTI reports, incident-response documents, pentest outputs, and red-team write-ups — and align them with the ATT&CK framework. It automatically connects those procedures to groups, campaigns, and software, which the firm says saves analyst hours by automating a traditionally manual enrichment process.

The platform identifies overlapping tools, coverage gaps, and underperforming defenses by assessing the security stack against real adversary behavior. Tidal Cyber cites customer outcomes including a 40% reduction in tool overlap and an 80% increase in control efficiency, which allows security leaders to demonstrate they can meet coverage requirements with existing tools — reducing or deferring new purchases.

Yes, Tidal Cyber provides a free Community Edition that includes user-created technique sets and matrices, curated extensions to ATT&CK, and a basic vendor registry on a shared cloud tenant. The Enterprise Edition adds continuous assessment, integrations with defensive platforms, a confidence score, prioritized remediation, and a single-tenant cloud environment with region flexibility.

The platform supports detection engineering, SOC management, CTI and threat research, red and purple teams, and threat hunters. Its tools help junior analysts perform at a higher level while enabling senior teams to improve overall security posture by validating controls and tuning detections against known adversary behaviors.